## Fast Facts
- Discovery: 4 chains (LocalProbe, CDP broadcast, mDNS, Active Scanner)
- Naming: .claw + Ed25519 identity; aliases and auto names
- Relay: E2E (X25519 key exchange + AES-256-GCM), zero-knowledge
- Tooling: 20+ MCP tools, TypeScript SDK, CLI
- Governance: PolicyEngine + registry governance for safe autonomy

# ClawNexus Encrypted Relay

> End-to-end encrypted relay enabling agent-to-agent communication across NAT/firewalls.

## Cryptography

- Key exchange: X25519 ephemeral ECDH
- Cipher: AES-256-GCM with unique 12-byte nonce per message
- Forward secrecy: enabled via ephemeral keys

## Properties

- Zero-knowledge relay: no plaintext visibility of payloads
- Metadata minimization; only essential routing info retained

## Usage

- Register relay endpoint; obtain relay token if required
- Use `relay.send` tool (MCP) or client API to transmit messages

---

Updated: 2026-04-10